Last updated 8 October 2026
Cookie policy
In short
We use a few strictly necessary cookies to remember your cookie choice, sign you in and keep you secure. With your permission only, we also use our own analytics cookies to count visits to this website. We do not use advertising cookies, we do not sell data and we do not track you on other websites. You can change your choice at any time.
1. What cookies are
Cookies are small files a website stores in your browser. They let the site remember things between pages and visits.
2. Strictly necessary cookies
These are always on, because the site and the app cannot work safely without them. They are not used for analytics or advertising.
| Cookie | Why | How long |
|---|---|---|
| bp_consent | Remembers whether you accepted or rejected analytics cookies, so we don't ask on every page. | 6 months |
| authjs.session-token (or __Secure-authjs.session-token) | Keeps you signed in to the app. | Up to 7 days |
| authjs.csrf-token (or __Host-authjs.csrf-token) | Protects sign-in forms against cross-site request forgery. | Until you close the browser |
| authjs.callback-url (or __Secure-authjs.callback-url) | Remembers where to take you after signing in. | Until you close the browser |
| bp_upwork_oauth | Links the Upwork login you start in Settings to your account, so no one else can finish it. | 10 minutes |
3. Analytics cookies (only if you accept)
When you first visit, a banner asks whether you accept analytics cookies. Until you tap Accept, we set no analytics cookies and record nothing about your visit. If you tap Reject, nothing is recorded and any analytics cookies are deleted. If your browser sends a Global Privacy Control signal, we treat it as Reject and do not ask.
If you accept, our own system (not Google Analytics or any other third party) uses these cookies:
| Cookie | Why | How long |
|---|---|---|
| bp_vid | A random number that tells new visitors from returning ones. It does not contain your name, email or IP address. | 13 months |
| bp_sid | Groups the pages you view in one visit, and tells us which visit a purchase request came from. | Until you close the browser |
With them we record, for each visit: the pages you view and for how long, the website or campaign link that brought you, your device type, browser and operating system, and an approximate location (city and country). The location is looked up from your IP address at the moment of the visit; your IP address is not stored. Visits are deleted after 13 months. We use this only to understand which pages and channels work and to improve the site. Signed-in users are never counted. See the privacy policy for details.
4. Your choices
- Change your choice at any time: (also at the bottom of every page).
- Rejecting analytics cookies does not change how the site or the app works for you.
- You can also block or delete cookies in your browser settings. If you block the necessary cookies, you will not be able to sign in.
5. Third parties
We do not load advertising, social media or third-party analytics scripts. Fonts and media are served from our own domain. Our network provider (Cloudflare) may use strictly necessary security cookies to protect the site from attacks.
6. Changes
If we change the cookies we use in a way that needs your permission, we will ask again with the banner before using them.